System retrieving information from Windows Eventlog and presenting them on a Webpage

We need a system, that is able to report, how many connections our users have to different SSID's on different locations. It should only count 1 connection per user per device per day. The idea is to get "access granted" by out Network Policy Server via the eventlog, since it holds (most) of the nescessary information. The information should then be added to a database. A Webpage should give access to the nescessary reports. The Scenaria is as following: We have approx 20 differente locations, with a total of 500 Accesspoints. We have several different SSIDs on those accesspoints. There are 5000 users, connecting to one ore more of those SSIDs from different devices. All connections are granted (or denied) by 2 Windows 2012R2 Servers by the Network Policy and Access Services (NPS). Every time the Service grants a connection, and event is logged in the eventlog for "Network Policy and Access Services" with eventid 6278. From the eventid, the following information can be extracted: timestamp,user,userdevicemacaddress (via Calling Station Identifier),accesspointmacaddress (via first part of Called Station Identifier) and SSID (via second part of Called Station Identifier). We can provide a list of all our accesspoints with their macaddress and location. This information should be imported in a database in a table (here named Accesspoints, with the fields: name,macaddress,location). With the information in the table Accesspoints combined with the information from the eventlog, we want the system to update another table in the database (her named Connections, with the fields: date,location,ssid,username,userdevicemacaddress). The system should work in such a way, that there will only be one record with same location,ssid,username,userdevicemacaddres per date. To get the reports, we want a webpage, where we can enter Date-interval. The webpage should then report how many connections there has been, using the information from the table "Connections" on for each SSID on each location in the specified date-interval, as well as showing the total number of connections to each SSID. We imagine, the system would need: 1) a database on mysql or mssql 2) a system (maybe a service on a Windows 2012R2) extracting information from the EventLog (specific the eventlog "Network Policy and Access Services" for eventid 6278). Be aware, that we have more than one NPS, so the system must be able to get eventids from multiple servers (here only 2). The service could eventually run on all NPS, and log to the same database. 3) A Web page with a GUI for the system running on IIS Below is a sample 6278 event from the eventid: Network Policy Server granted full access to a user because the host met the defined health policy. User: Security ID: MYDOM\myuser Account Name: myuser Account Domain: MYDOM Fully Qualified Account Name: MYDOM\myuser Client Machine: Security ID: NULL SID Account Name: - Fully Qualified Account Name: - OS-Version: - Called Station Identifier: 64-a0-e7-5c-ad-50:MySSID Calling Station Identifier: 18-e7-f4-9c-38-e8